Oneblog Project: >> Oneblog Security Vulnerabilities
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority.
CVSS Score
6.5
EPSS Score
0.001
Published
2022-01-25
A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in the background.
CVSS Score
5.4
EPSS Score
0.002
Published
2022-01-19